5
CVSSv2

CVE-2001-1290

Published: 28/06/2001 Updated: 19/12/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote malicious users to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

active web suite technologies active classifieds 1.0

Exploits

source: wwwsecurityfocuscom/bid/2942/info Active Classifieds is a CGI package that provides an online classified advertisement listing and management system An origin validation error exists in the Free Edition of Active Classifieds that may allow remote users to perform some administrative commands without authentication As a result, ...